Google has patched 129 Android vulnerabilities, including an actively exploited flaw in a widely used Qualcomm component.